Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/ANSAYrE9HNntD61TvEpJUmG8rgw.roa
File: ANSAYrE9HNntD61TvEpJUmG8rgw.roa (raw, json)
Hash identifier: 4+iM21UqhAp7nE5c7mZKQw9TVqg+SMBpGm5UpV8V8dc=
Subject key identifier: 00:D4:80:62:B1:3D:1C:D9:ED:0F:AD:53:BC:4A:49:52:61:BC:AE:0C
Certificate issuer: /CN=95b980b81039581e0d2c37a51216cd79729b0c71
Certificate serial: 019425FC2FF87EB808FBBEB31255730465E4
Authority key identifier: 95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/ANSAYrE9HNntD61TvEpJUmG8rgw.roa
Signing time: Thu 02 Jan 2025 07:47:51 +0000
ROA not before: Thu 02 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21226
IP address blocks: 80.91.192.0/21 maxlen: 21
80.91.200.0/22 maxlen: 22
80.91.204.0/24 maxlen: 24
80.91.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2f:f8:7e:b8:08:fb:be:b3:12:55:73:04:65:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b980b81039581e0d2c37a51216cd79729b0c71
Validity
Not Before: Jan 2 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00d48062b13d1cd9ed0fad53bc4a495261bcae0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:ba:13:72:7a:2f:19:96:00:ba:b2:c3:79:
d4:f1:a6:9f:b8:8a:7a:21:16:01:5c:19:5e:98:2f:
55:78:b4:fc:01:93:2b:f3:89:70:6a:91:b9:ad:68:
d9:1b:49:50:06:8b:45:ef:52:c1:5d:0c:06:b1:96:
ad:62:bb:3d:c8:55:2f:a3:3c:ad:16:fd:8a:bd:b9:
20:4c:24:0c:83:2c:ba:81:39:2f:23:a3:c1:36:93:
44:90:2b:12:66:cf:e1:b9:80:92:01:42:7a:82:fb:
b3:45:d2:0c:d9:44:58:06:5b:04:8a:24:c8:f3:8f:
6b:ca:af:a9:6c:db:47:c4:3f:03:46:45:94:5b:f0:
c1:56:c6:aa:39:89:4f:46:8e:3f:e4:ac:42:99:0b:
1d:02:02:ca:02:9b:35:d2:7f:c3:83:39:74:dc:83:
3c:b7:aa:ca:6e:ca:c2:c7:4f:28:e1:b7:1b:84:e7:
34:1b:4a:a8:70:18:22:a3:57:4a:59:8f:ef:db:b0:
f7:3c:4b:9a:79:58:19:68:d1:21:b5:81:20:56:f6:
64:1a:d1:dc:4f:10:ec:5a:f9:72:04:e0:8f:db:fd:
58:ec:62:27:7b:e5:54:d1:b5:22:f2:bb:97:53:40:
54:86:39:84:d3:87:24:fb:9d:78:89:37:ab:f1:6b:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:80:62:B1:3D:1C:D9:ED:0F:AD:53:BC:4A:49:52:61:BC:AE:0C
X509v3 Authority Key Identifier:
keyid:95:B9:80:B8:10:39:58:1E:0D:2C:37:A5:12:16:CD:79:72:9B:0C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbmAuBA5WB4NLDelEhbNeXKbDHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/ANSAYrE9HNntD61TvEpJUmG8rgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/lbmAuBA5WB4NLDelEhbNeXKbDHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.192.0-80.91.204.255
80.91.206.0/23
Signature Algorithm: sha256WithRSAEncryption
62:8b:2e:3e:e1:75:eb:4e:b1:89:f7:ea:e0:a9:98:b2:95:0c:
fe:9f:ef:11:a9:76:49:b4:39:2d:0c:8d:17:80:1d:06:2c:66:
33:19:4a:25:d8:3a:f1:ba:e7:35:99:c4:57:91:15:e5:06:d7:
1b:45:f4:56:14:c9:10:35:61:ff:9f:a1:7a:ed:0f:25:5c:70:
22:86:57:55:5c:f8:fe:87:55:9e:27:9e:1d:a6:8a:ce:ae:95:
1e:b2:d9:36:a1:86:fc:eb:f1:fb:75:16:4f:d8:aa:3b:34:fa:
61:8e:56:3f:2d:d5:81:94:12:20:15:90:20:4f:56:25:d1:95:
e3:f0:63:27:3b:a3:d7:8e:93:9e:21:9c:aa:43:07:8f:58:7c:
68:7d:c7:25:db:1f:05:ca:a6:1d:f5:34:f7:0b:dc:b9:04:a0:
b8:9e:cd:0f:d1:fe:e8:94:64:c4:0b:39:78:b4:10:11:bd:cb:
49:1d:ce:14:86:87:aa:a0:fa:96:e9:7e:b9:3c:10:bd:7a:20:
ad:3b:2f:28:64:da:49:81:29:69:f7:a5:1c:aa:5c:70:0c:ce:
61:78:f1:15:12:54:74:97:30:8d:18:d8:31:da:a3:bd:3b:a8:
6b:d9:07:c2:2a:fe:07:70:27:00:7c:8d:a5:63:35:19:1b:dd:
85:de:19:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net